HackingLowResolved
Northeast Spine and Sports Medicine's
bd_1b47b2bf01cc6441 · schema v1 · pii pii-v1
Full breach record for Northeast Spine and Sports Medicine's →Northeast Spine and Sports Medicine LLC, a healthcare organization, reported an internal system breach that occurred and was discovered on January 8, 2024. One Maine resident was affected. The company provided electronic notification to affected individuals on October 17, 2024, and offered 24 months of free credit monitoring services through Experian.
Maine clockDiscovered Jan 8, 2024 → Filed with AG Oct 23, 2024289d ✗ ME AG >90d41 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
A leak claim by bianlian about this victim predates this filing by 281 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_1792772f2ef0f26eLeak Sitebianlianfiled 2024-01-15(282d gap)Candidate
Regulatory filings (1) · sorted by filing gap
- bd_0ab395dba0bb9eb0New Hampshire State AGBian Lianfiled 2024-10-18(5d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/dd088f2b-8aee-4090-85f5-98550b3b79aa.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 23, 2024
- Raw hash
- b751b45d42f9ebc5931289c6e5130a638f82bb5dd47b2c28bea47ec1d3b9c03d
Reporting entity
- Name
- Northeast Spine and Sports Medicine'snorm: northeast spine and sports medicine s
- Domain
- northeastspineandsports.com
Victim entity
- Name
- Northeast Spine and Sports Medicine'snorm: northeast spine and sports medicine s
- Domain
- northeastspineandsports.com
Incident
- Discovered
- Jan 8, 2024
- Materiality determined
- —
- Notification sent
- Oct 17, 2024
- Affected individuals
- 1
- Data types
- —
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 41 weeks(289 days from discovery to filing)
- Compliance flags
- ME AG >90d · 289dME resident >180d · 283dLeak >180d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 8, 2024→ Filed with AG: Oct 23, 2024289d 90 days ME AG >90d Maine Discovered: Jan 8, 2024→ Notified: Oct 17, 2024283d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.